Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33362e302f32342d3234203d3e20383334.roa
File: 38312e32322e33362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: udLsvjR1rMQtZO/WWXjRrj8sONeemrGdojCNn1USSRo=
Subject key identifier: 73:0E:0F:46:29:5C:78:23:97:30:31:64:07:03:08:D7:2F:F6:23:85
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 572EF6CE9D1B0B0E4972F06E8013023C39D7241C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33362e302f32342d3234203d3e20383334.roa
Signing time: Mon 23 Feb 2026 12:12:43 +0000
ROA not before: Mon 23 Feb 2026 12:07:43 +0000
ROA not after: Mon 22 Feb 2027 12:12:43 +0000
asID: 834
IP address blocks: 81.22.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:2e:f6:ce:9d:1b:0b:0e:49:72:f0:6e:80:13:02:3c:39:d7:24:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Feb 23 12:07:43 2026 GMT
Not After : Feb 22 12:12:43 2027 GMT
Subject: CN=730E0F46295C782397303164070308D72FF62385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cb:c6:d7:1b:77:6b:93:fa:15:4d:25:be:15:
77:d8:ef:ed:a9:f3:86:bd:46:15:d1:39:e7:30:ad:
69:e4:4e:83:87:ef:2d:d1:83:01:bf:81:6a:9d:bf:
77:53:22:1d:9f:c8:a4:2d:4d:c6:b2:ae:18:19:f4:
19:8f:71:9d:f6:4b:3d:af:2d:f5:ab:ac:13:86:3a:
26:41:ab:54:6a:57:6a:f8:81:1a:87:ea:4b:7e:4e:
cb:e2:65:58:f2:3b:e6:08:f4:8a:72:51:ea:3d:39:
ce:ae:1a:02:78:84:43:be:18:73:38:45:ce:a4:ca:
8e:93:7a:fb:5f:fd:69:2f:8e:ea:b9:b2:33:ee:8a:
a9:c4:b2:42:71:19:ba:56:be:94:f3:ff:f9:7d:51:
8d:44:22:b4:76:97:8a:94:9e:58:ea:38:9c:9a:0a:
b8:49:1d:93:60:08:82:e6:12:58:1b:8c:39:d3:3c:
0d:dc:3a:1b:d4:1a:12:51:c5:4b:70:8e:46:8c:ae:
ff:fd:71:9e:21:15:89:69:f3:25:2e:c9:e8:2d:ed:
52:dc:a0:a6:03:8e:e5:48:75:c7:89:9a:5d:38:cb:
eb:c2:cb:39:a3:6a:74:4b:e6:27:09:32:5e:e3:8f:
9b:e5:12:a4:07:0e:1f:3e:e5:51:ce:f4:62:82:4e:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0E:0F:46:29:5C:78:23:97:30:31:64:07:03:08:D7:2F:F6:23:85
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.36.0/24
Signature Algorithm: sha256WithRSAEncryption
07:87:5c:ad:1f:98:eb:f8:49:89:42:0d:b9:db:b7:17:de:13:
8c:ed:09:8e:14:8b:9b:80:f1:cf:b0:0f:c8:21:5f:5d:a3:f9:
44:7e:28:46:8f:f8:3e:b5:98:92:08:d7:58:48:81:78:d9:2c:
d6:41:b7:96:f2:14:f3:cd:5e:bf:9a:b0:6e:b2:5d:cc:ce:5a:
6e:44:21:73:64:fb:cf:c1:4a:55:71:cf:b4:53:e1:92:34:96:
37:00:ea:7e:30:5d:3d:9d:cb:d9:72:2d:d0:79:8a:bc:6f:8e:
5a:f5:9f:36:d5:f0:e8:37:1a:98:ea:90:e6:31:ae:de:83:5e:
32:f3:1a:79:62:c4:19:3d:1d:50:58:01:6f:83:fb:6e:b6:06:
e3:df:ce:e3:81:f9:f1:7e:22:aa:96:4a:1a:e3:53:b3:cb:10:
9e:76:7c:da:c9:fd:38:51:47:50:a2:b5:c0:a1:79:2b:2b:42:
8f:6b:15:d6:da:2c:07:f8:f7:90:43:89:4d:75:4d:73:22:6e:
f1:97:d2:17:fc:10:00:d2:54:14:ac:ad:c2:a0:47:99:e5:40:
70:fd:72:13:c4:28:37:1b:f2:e3:79:8a:d5:41:0d:17:1a:3e:
79:25:4d:c8:4f:31:0b:9b:4c:e3:03:35:8d:16:37:11:d2:47:
de:ae:eb:4c
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUVy72zp0bCw5JcvBugBMCPDnXJBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjAyMjMxMjA3NDNaFw0yNzAyMjIxMjEyNDNaMDMxMTAvBgNV
BAMTKDczMEUwRjQ2Mjk1Qzc4MjM5NzMwMzE2NDA3MDMwOEQ3MkZGNjIzODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcy8bXG3drk/oVTSW+FXfY7+2p
84a9RhXROecwrWnkToOH7y3RgwG/gWqdv3dTIh2fyKQtTcayrhgZ9BmPcZ32Sz2v
LfWrrBOGOiZBq1RqV2r4gRqH6kt+TsviZVjyO+YI9IpyUeo9Oc6uGgJ4hEO+GHM4
Rc6kyo6Tevtf/Wkvjuq5sjPuiqnEskJxGbpWvpTz//l9UY1EIrR2l4qUnljqOJya
CrhJHZNgCILmElgbjDnTPA3cOhvUGhJRxUtwjkaMrv/9cZ4hFYlp8yUuyegt7VLc
oKYDjuVIdceJml04y+vCyzmjanRL5icJMl7jj5vlEqQHDh8+5VHO9GKCTqLjAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUcw4PRilceCOXMDFkBwMI1y/2I4UwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMxMmUzMjMyMmUz
MzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURYk
MA0GCSqGSIb3DQEBCwUAA4IBAQAHh1ytH5jr+EmJQg2527cX3hOM7QmOFIubgPHP
sA/IIV9do/lEfihGj/g+tZiSCNdYSIF42SzWQbeW8hTzzV6/mrBusl3MzlpuRCFz
ZPvPwUpVcc+0U+GSNJY3AOp+MF09ncvZci3QeYq8b45a9Z821fDoNxqY6pDmMa7e
g14y8xp5YsQZPR1QWAFvg/tutgbj387jgfnxfiKqlkoa41OzyxCednzayf04UUdQ
orXAoXkrK0KPaxXW2iwH+PeQQ4lNdU1zIm7xl9IX/BAA0lQUrK3CoEeZ5UBw/XIT
xCg3G/LjeYrVQQ0XGj55JU3ITzELm0zjAzWNFjcR0kferutM
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:23:12 2026 by rpki-client